agentworkshop 0.7.6 → 0.7.8

package/server/plugins/workshop.ts

@@ -1,153 +1,156 @@
-/**
- * Workshop 启动插件(设计文档 §8)。
- * Nitro 启动时:创建 data/ 目录 → openWorkshopDb(data/workshop.sqlite)→ 装配 5 个 repo
- * + createAgentImpl 工厂 → createAgentChannelManager → restore() 恢复运行时
- * → 为有 lead 的 channel 启动 SchedulerLoop → 挂 globalThis.__workshopManager。
- *
- * 导出:
- *  - getWorkshopManager():读取进程级 manager 单例(先检查已设置;未初始化抛 503)
- *  - ensureLeadSchedulerLoop():为 channel 装配并启动 lead 的 SchedulerLoop(幂等)
- *
- * 注意:不静态 import 'nitropack/runtime/plugin'——defineNitroPlugin 是恒等函数,
- * 插件 default 直接导出普通函数即可,避免把 nitropack 依赖引入可被 tsx 直跑测试
- * 导入的模块图(顶层 node_modules 无 nitropack 符号链接)。
- */
-import { mkdirSync } from 'node:fs'
-import { resolve } from 'node:path'
-import { ensureDataDir } from '@/shared/config/home.mjs'
-import { openWorkshopDb, initWorkshopDb } from '../services/workshop/db/database'
-import { createChannelRepo } from '../services/workshop/db/channel.repo'
-import { createAgentRepo } from '../services/workshop/db/agent.repo'
-import { createChannelAgentRepo } from '../services/workshop/db/channel-agent.repo'
-import { createTeamRepo } from '../services/workshop/db/team.repo'
-import { createTeamMemberRepo } from '../services/workshop/db/team-member.repo'
-import { createChannelTemplateRepo } from '../services/workshop/db/channel-template.repo'
-import { createTaskRepo } from '../services/workshop/db/task.repo'
-import { createMessageRepo } from '../services/workshop/db/message.repo'
-import { createSubscriptionRepo } from '../services/workshop/db/subscription.repo'
-import { createMemoryRepo } from '../services/workshop/db/memory.repo'
-import { createUserRepo } from '../services/workshop/db/user.repo'
-import { createChannelEventRepo } from '../services/workshop/db/channel-event.repo'
-import { createApprovalHistoryRepo, createAlarmEventRepo, createAuditRepo, createApprovalRequestRepo } from '../services/workshop/db/ops.repo'
-import { bindOpsRepos } from '../services/workshop/ops/ops'
-import { configureHitlResolver } from '../services/workshop/agents/hitl-registry'
-import { ensureAllEventRecorders } from '../api/workshop/ws'
-import { createAgentImpl } from '../services/workshop/agents/factory'
-import {
-  createAgentChannelManager,
-  type AgentChannelManager,
-  type AllRepos,
-  type ManagerDeps,
-} from '../services/workshop/runtime/manager'
-import { AppError } from '../utils/errors'
-import { workshopSettings } from '../services/workshop/settings'
-
-declare global {
-
-  var __workshopManager: AgentChannelManager | undefined
-}
-
-/** 读取进程级 manager 单例(先检查已设置;未初始化抛 503) */
-export function getWorkshopManager(): AgentChannelManager {
-  const manager = globalThis.__workshopManager
-  if (!manager) {
-    throw new AppError(503, 'WORKSHOP_NOT_READY', 'workshop 尚未初始化(plugin 未执行)')
-  }
-  return manager
-}
-
-/**
- * 为 channel 装配并启动 lead 的 SchedulerLoop(幂等)。
- * 委托 manager.ensureChannelActive(懒加载:装配 lead + 调度循环)。
- */
-export function ensureLeadSchedulerLoop(
-  manager: AgentChannelManager,
-  channelId: string,
-  options?: { tickMs?: number, stallMs?: number },
-): void {
-  manager.ensureChannelActive(channelId, options)
-}
-
-/**
- * Nitro 启动插件(默认导出普通函数;defineNitroPlugin 为恒等包装)。
- * 注意:runNitroPlugins 同步调用 plugin,不 await 返回值;manager.restore() 方法体全同步
- * (无 await 语句),直接调用即同步完成恢复,故此处不 await。
- * 幂等:globalThis.__workshopManager 已设置(如测试预置)则跳过初始化。
- */
-export default function workshopPlugin(nitroApp: {
-  hooks: { hook(name: string, fn: (...args: unknown[]) => void | Promise<void>): void }
-}): void {
-  // 进程级未处理拒绝兜底(Node ≥23 默认对 unhandledRejection 抛错可击穿整个服务)。
-  // 环境型连接复位(休眠/断网后陈旧 socket read ECONNRESET、omp 子进程管道抖动等)
-  // 不应让服务崩溃;记录上下文后继续运行(正常业务错误仍走各自显式处理路径)。
-  process.on('unhandledRejection', (reason) => {
-    console.error('[workshop] 未处理 Promise rejection(已兜底,不影响服务):', reason)
-  })
-
-  // 先检查已设置:避免重复装配覆盖既有单例
-  if (globalThis.__workshopManager) return
-
-  // 数据目录经配置根解析（repo: <repo>/.AgentWorkShop/data;home: ~/.AgentWorkShop/data;
-  // ensureDataDir 自动迁移旧 cwd/data 位置,目录不存在则创建）
-  const dataDir = ensureDataDir()
-  mkdirSync(dataDir, { recursive: true })
-
-  // 打开(或创建)数据库 → 初始化(建表 + PRAGMA;openWorkshopDb 已内置,显式再调一次保持幂等)
-  const db = openWorkshopDb(resolve(dataDir, 'workshop.sqlite'))
-  initWorkshopDb(db)
-
-  // 装配 repos + Agent impl 工厂
-  const repos: AllRepos = {
-    users: createUserRepo(db),
-    channelEvents: createChannelEventRepo(db),
-    channels: createChannelRepo(db),
-    agents: createAgentRepo(db),
-    teams: createTeamRepo(db),
-    teamMembers: createTeamMemberRepo(db),
-    channelTemplates: createChannelTemplateRepo(db),
-    channelAgents: createChannelAgentRepo(db),
-    messages: createMessageRepo(db),
-    subscriptions: createSubscriptionRepo(db),
-    tasks: createTaskRepo(db),
-    memories: createMemoryRepo(db),
-  }
-  // S4/S5/R1/R3:合规三表仓储接线(审批历史/报警事件/审计日志/高危复核)
-  bindOpsRepos({
-    approvalHistory: createApprovalHistoryRepo(db),
-    alarmEvents: createAlarmEventRepo(db),
-    audit: createAuditRepo(db),
-    approvalRequests: createApprovalRequestRepo(db),
-  })
-  const deps: ManagerDeps = { repos, implFactory: createAgentImpl, db }
-
-  // 创建 manager → 挂全局单例(后续 REST/A2A/WS 经 getWorkshopManager() 读取)
-  const manager = createAgentChannelManager(deps)
-  globalThis.__workshopManager = manager
-
-  // HITL 全局待办:agentId → channelId/agentName 解析器(避免 registry 反向依赖 manager)
-  configureHitlResolver((agentId) => {
-    const row = repos.channelAgents.findById(agentId)
-    return row ? { channelId: row.channelId, agentName: row.name } : null
-  })
-
-  // 懒加载恢复:仅激活有待办任务的 channel(装配 lead + 调度循环);其余纯持久化
-  manager.restore()
-
-  // 全时事件录制:为全部存量 channel 建立常驻流(事件 server 驱动落库,与 client 无关)
-  void ensureAllEventRecorders(manager).catch(err => console.error('[workshop] 事件录制器初始化失败:', err))
-
-  // idle sweeper:空闲 agent 超时自动卸载(释放 omp 子进程与内存)。
-  // busy 成员有三重守卫(state!==idle / 信箱 pending / lead 活跃任务)不会被卸载,
-  // "作业期间进程不断开"由守卫保证;空闲宽限可经 workshop.idle_grace_ms 调整 ——
-  // 需要进程更长常驻(免冷启动 30~90s)时调大(env WORKSHOP_IDLE_GRACE_MS 兼容)。
-  const idleSweepMs = workshopSettings().idle_sweep_ms
-  const idleGraceMs = workshopSettings().idle_grace_ms
-  const stopSweeper = manager.startIdleSweeper({ intervalMs: idleSweepMs, graceMs: idleGraceMs })
-
-  // 关机:完整关闭 manager(sweeper + 调度循环 + agent 运行时),关闭数据库
-  nitroApp.hooks.hook('close', async () => {
-    stopSweeper()
-    await manager.shutdown()
-    db.close()
-  })
-}
+/**
+ * Workshop 启动插件(设计文档 §8)。
+ * Nitro 启动时:创建 data/ 目录 → openWorkshopDb(data/workshop.sqlite)→ 装配 5 个 repo
+ * + createAgentImpl 工厂 → createAgentChannelManager → restore() 恢复运行时
+ * → 为有 lead 的 channel 启动 SchedulerLoop → 挂 globalThis.__workshopManager。
+ *
+ * 导出:
+ *  - getWorkshopManager():读取进程级 manager 单例(先检查已设置;未初始化抛 503)
+ *  - ensureLeadSchedulerLoop():为 channel 装配并启动 lead 的 SchedulerLoop(幂等)
+ *
+ * 注意:不静态 import 'nitropack/runtime/plugin'——defineNitroPlugin 是恒等函数,
+ * 插件 default 直接导出普通函数即可,避免把 nitropack 依赖引入可被 tsx 直跑测试
+ * 导入的模块图(顶层 node_modules 无 nitropack 符号链接)。
+ */
+import { mkdirSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { ensureDataDir } from '@/shared/config/home.mjs'
+import { openWorkshopDb, initWorkshopDb } from '../services/workshop/db/database'
+import { backupRegistry } from '../services/workshop/db/backup-registry'
+import { createChannelRepo } from '../services/workshop/db/channel.repo'
+import { createAgentRepo } from '../services/workshop/db/agent.repo'
+import { createChannelAgentRepo } from '../services/workshop/db/channel-agent.repo'
+import { createTeamRepo } from '../services/workshop/db/team.repo'
+import { createTeamMemberRepo } from '../services/workshop/db/team-member.repo'
+import { createChannelTemplateRepo } from '../services/workshop/db/channel-template.repo'
+import { createTaskRepo } from '../services/workshop/db/task.repo'
+import { createMessageRepo } from '../services/workshop/db/message.repo'
+import { createSubscriptionRepo } from '../services/workshop/db/subscription.repo'
+import { createMemoryRepo } from '../services/workshop/db/memory.repo'
+import { createUserRepo } from '../services/workshop/db/user.repo'
+import { createChannelEventRepo } from '../services/workshop/db/channel-event.repo'
+import { createApprovalHistoryRepo, createAlarmEventRepo, createAuditRepo, createApprovalRequestRepo } from '../services/workshop/db/ops.repo'
+import { bindOpsRepos } from '../services/workshop/ops/ops'
+import { configureHitlResolver } from '../services/workshop/agents/hitl-registry'
+import { ensureAllEventRecorders } from '../api/workshop/ws'
+import { createAgentImpl } from '../services/workshop/agents/factory'
+import {
+  createAgentChannelManager,
+  type AgentChannelManager,
+  type AllRepos,
+  type ManagerDeps,
+} from '../services/workshop/runtime/manager'
+import { AppError } from '../utils/errors'
+import { workshopSettings } from '../services/workshop/settings'
+
+declare global {
+
+  var __workshopManager: AgentChannelManager | undefined
+}
+
+/** 读取进程级 manager 单例(先检查已设置;未初始化抛 503) */
+export function getWorkshopManager(): AgentChannelManager {
+  const manager = globalThis.__workshopManager
+  if (!manager) {
+    throw new AppError(503, 'WORKSHOP_NOT_READY', 'workshop 尚未初始化(plugin 未执行)')
+  }
+  return manager
+}
+
+/**
+ * 为 channel 装配并启动 lead 的 SchedulerLoop(幂等)。
+ * 委托 manager.ensureChannelActive(懒加载:装配 lead + 调度循环)。
+ */
+export function ensureLeadSchedulerLoop(
+  manager: AgentChannelManager,
+  channelId: string,
+  options?: { tickMs?: number, stallMs?: number },
+): void {
+  manager.ensureChannelActive(channelId, options)
+}
+
+/**
+ * Nitro 启动插件(默认导出普通函数;defineNitroPlugin 为恒等包装)。
+ * 注意:runNitroPlugins 同步调用 plugin,不 await 返回值;manager.restore() 方法体全同步
+ * (无 await 语句),直接调用即同步完成恢复,故此处不 await。
+ * 幂等:globalThis.__workshopManager 已设置(如测试预置)则跳过初始化。
+ */
+export default function workshopPlugin(nitroApp: {
+  hooks: { hook(name: string, fn: (...args: unknown[]) => void | Promise<void>): void }
+}): void {
+  // 进程级未处理拒绝兜底(Node ≥23 默认对 unhandledRejection 抛错可击穿整个服务)。
+  // 环境型连接复位(休眠/断网后陈旧 socket read ECONNRESET、omp 子进程管道抖动等)
+  // 不应让服务崩溃;记录上下文后继续运行(正常业务错误仍走各自显式处理路径)。
+  process.on('unhandledRejection', (reason) => {
+    console.error('[workshop] 未处理 Promise rejection(已兜底,不影响服务):', reason)
+  })
+
+  // 先检查已设置:避免重复装配覆盖既有单例
+  if (globalThis.__workshopManager) return
+
+  // 数据目录经配置根解析（repo: <repo>/.AgentWorkShop/data;home: ~/.AgentWorkShop/data;
+  // ensureDataDir 自动迁移旧 cwd/data 位置,目录不存在则创建）
+  const dataDir = ensureDataDir()
+  mkdirSync(dataDir, { recursive: true })
+
+  // 打开(或创建)数据库 → 初始化(建表 + PRAGMA;openWorkshopDb 已内置,显式再调一次保持幂等)
+  const db = openWorkshopDb(resolve(dataDir, 'workshop.sqlite'))
+  initWorkshopDb(db)
+  // 登记主连接(备份插件 serialize 跑在主连接上,杜绝第二连接失效语句的事故)
+  backupRegistry.register(resolve(dataDir, 'workshop.sqlite'), db)
+
+  // 装配 repos + Agent impl 工厂
+  const repos: AllRepos = {
+    users: createUserRepo(db),
+    channelEvents: createChannelEventRepo(db),
+    channels: createChannelRepo(db),
+    agents: createAgentRepo(db),
+    teams: createTeamRepo(db),
+    teamMembers: createTeamMemberRepo(db),
+    channelTemplates: createChannelTemplateRepo(db),
+    channelAgents: createChannelAgentRepo(db),
+    messages: createMessageRepo(db),
+    subscriptions: createSubscriptionRepo(db),
+    tasks: createTaskRepo(db),
+    memories: createMemoryRepo(db),
+  }
+  // S4/S5/R1/R3:合规三表仓储接线(审批历史/报警事件/审计日志/高危复核)
+  bindOpsRepos({
+    approvalHistory: createApprovalHistoryRepo(db),
+    alarmEvents: createAlarmEventRepo(db),
+    audit: createAuditRepo(db),
+    approvalRequests: createApprovalRequestRepo(db),
+  })
+  const deps: ManagerDeps = { repos, implFactory: createAgentImpl, db }
+
+  // 创建 manager → 挂全局单例(后续 REST/A2A/WS 经 getWorkshopManager() 读取)
+  const manager = createAgentChannelManager(deps)
+  globalThis.__workshopManager = manager
+
+  // HITL 全局待办:agentId → channelId/agentName 解析器(避免 registry 反向依赖 manager)
+  configureHitlResolver((agentId) => {
+    const row = repos.channelAgents.findById(agentId)
+    return row ? { channelId: row.channelId, agentName: row.name } : null
+  })
+
+  // 懒加载恢复:仅激活有待办任务的 channel(装配 lead + 调度循环);其余纯持久化
+  manager.restore()
+
+  // 全时事件录制:为全部存量 channel 建立常驻流(事件 server 驱动落库,与 client 无关)
+  void ensureAllEventRecorders(manager).catch(err => console.error('[workshop] 事件录制器初始化失败:', err))
+
+  // idle sweeper:空闲 agent 超时自动卸载(释放 omp 子进程与内存)。
+  // busy 成员有三重守卫(state!==idle / 信箱 pending / lead 活跃任务)不会被卸载,
+  // "作业期间进程不断开"由守卫保证;空闲宽限可经 workshop.idle_grace_ms 调整 ——
+  // 需要进程更长常驻(免冷启动 30~90s)时调大(env WORKSHOP_IDLE_GRACE_MS 兼容)。
+  const idleSweepMs = workshopSettings().idle_sweep_ms
+  const idleGraceMs = workshopSettings().idle_grace_ms
+  const stopSweeper = manager.startIdleSweeper({ intervalMs: idleSweepMs, graceMs: idleGraceMs })
+
+  // 关机:完整关闭 manager(sweeper + 调度循环 + agent 运行时),关闭数据库
+  nitroApp.hooks.hook('close', async () => {
+    stopSweeper()
+    await manager.shutdown()
+    db.close()
+  })
+}

package/server/repositories/user.repository.ts

@@ -1,4 +1,5 @@
 import { existsSync } from 'node:fs'
+import { backupRegistry } from '../services/workshop/db/backup-registry'
 import { join, resolve } from 'node:path'
 import { randomBytes, randomUUID, scryptSync, createHash, timingSafeEqual } from 'node:crypto'
 import { DatabaseSync } from 'node:sqlite'
@@ -41,25 +42,19 @@ CREATE TABLE IF NOT EXISTS user_tokens (
 CREATE INDEX IF NOT EXISTS idx_user_tokens_user ON user_tokens(user_id);
 `
 
-/** 种子用户（首次建库时写入；默认密码 Awshop@123，便于开箱登录） */
-const SEED_USERS = [
-  { name: '张伟', email: 'zhangwei@awshop.io', role: 'admin', status: 'active' },
-  { name: '王芳', email: 'wangfang@awshop.io', role: 'editor', status: 'active' },
-  { name: '李娜', email: 'lina@awshop.io', role: 'user', status: 'disabled' },
-  { name: '刘洋', email: 'liuyang@awshop.io', role: 'editor', status: 'active' },
-  { name: '陈静', email: 'chenjing@awshop.io', role: 'user', status: 'active' },
-  { name: 'Michael Chen', email: 'michael@awshop.io', role: 'user', status: 'active' },
-]
-
 let db: DatabaseSync | null = null
 
 function getDb(): DatabaseSync {
   if (!db) {
     // 目录由 ensureDataDir 内部创建(含旧位置迁移)
     db = new DatabaseSync(DB_PATH)
+    // 主连接登记(备份 serialize 用;见 backup-registry 说明)
+    backupRegistry.register(DB_PATH, db)
+    db.exec('PRAGMA busy_timeout = 5000')
     db.exec(SCHEMA_SQL)
     migrateSchema(db)
-    seedIfEmpty()
+    // 首启零用户:不播种任何账号,由使用者在登录页注册第一个账号(自动成为管理员,
+    // 见 user.service.register 的初始化判定)
     importLegacyWorkshopUsers(db)
   }
   return db
@@ -91,17 +86,6 @@ function maskPreview(raw: string): string {
   return `${raw.slice(0, 6)}${'•'.repeat(8)}${raw.slice(-4)}`
 }
 
-/** 首次建库写入种子用户（幂等：users 非空即跳过） */
-function seedIfEmpty(): void {
-  const d = db!
-  const { n } = d.prepare('SELECT COUNT(*) AS n FROM users').get() as { n: number }
-  if (n > 0) return
-  const insert = d.prepare('INSERT INTO users (id, name, email, password_hash, role, status, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)')
-  const hash = hashPassword('Awshop@123')
-  for (const u of SEED_USERS) {
-    insert.run(randomUUID(), u.name, u.email, hash, u.role, u.status, now())
-  }
-}
 /**
  * 一次性迁移：旧 workshop 本地用户（data/workshop.sqlite 的 users 表）导入全局用户系统。
  * - 保留原 id/name（资源归属 owner_user_id 不变，历史数据不丢）
@@ -215,6 +199,8 @@ WHERE t.token_hash = ?`,
   if (!row) return null
   // R2:过期单点判定(resolveUser/resolveAgentOrUser/me 全部经此收敛)
   if (row.expiresAt && Date.parse(row.expiresAt) < Date.now()) return null
+  // 禁用账号即时失效(此前存量 token 在禁用后最长 30 天仍可用)
+  if (row.status && row.status !== 'active') return null
   d.prepare('UPDATE user_tokens SET last_used_at = ? WHERE token_hash = ?').run(now(), hash)
   return row
 }
@@ -265,6 +251,13 @@ export const userRepository = {
     return row ? toUser(row) : undefined
   },
 
+  /** 是否存在活跃管理员(初始化判定:false → 系统处于首启注册模式,首个注册账号将成为管理员) */
+  hasActiveAdmin(): boolean {
+    const d = getDb()
+    const { n } = d.prepare("SELECT COUNT(*) AS n FROM users WHERE role = 'admin' AND status = 'active'").get() as { n: number }
+    return n > 0
+  },
+
   /** 内部：取密码哈希（仅认证路径使用，不参与领域对象外泄） */
   getPasswordHash(email: string): { id: string, hash: string } | null {
     const d = getDb()

package/server/services/system-config.ts

@@ -14,9 +14,10 @@
  * 使用：server/plugins/system-config.ts 在 Nitro 启动时 init()；
  * 业务经 getSystemConfigService() 读取（不存在则惰性初始化，幂等）。
  */
-import { watch, existsSync } from 'node:fs'
-import { join } from 'node:path'
+import { watch, existsSync, mkdirSync, copyFileSync } from 'node:fs'
+import { join, dirname } from 'node:path'
 import { useRuntimeConfig } from '#imports'
+import { resolveRunMode } from '@/shared/config/home.mjs'
 import { AppError } from '../utils/errors'
 import {
   loadDescriptors,
@@ -82,7 +83,8 @@ declare global {
 
 export class SystemConfigService {
   private descriptors: SettingsDescriptor[] = []
-  private map = new Map<string, SettingsDescriptor>()
+  /** key → 描述符(loadDescriptorMap 返回普通对象,非 Map;下标访问) */
+  private map: Record<string, SettingsDescriptor> = {}
   private overrides: Record<string, unknown> = {}
   private envOverrides: Record<string, unknown> = {}
   private effective: Record<string, unknown> = {}
@@ -97,7 +99,29 @@ export class SystemConfigService {
 
   constructor(readonly root: string) {
     this.configPath = join(root, 'config.yml')
-    this.settingsPath = join(root, 'data', 'runtime-settings.json')
+    // 设置文件必须与 CLI(aw config set)/start/dev-guard 同源(resolveRunMode 单一入口):
+    // 原先写死 <cwd>/data/runtime-settings.json 造成"API 写 A、子系统读 B"的脑裂 —— 备份
+    // 周期/保留期/DAQ 覆盖等运行时设置对服务端静默无效。
+    const rm = resolveRunMode({ cwd: root, packageRoot: process.env.AW_PACKAGE_ROOT, env: process.env })
+    this.configPath = rm.configPath ?? this.configPath
+    this.settingsPath = rm.settingsPath ?? this.settingsPath
+    // 一次性收敛:遗留 <cwd>/data/runtime-settings.json 且目标不存在 → 迁移;两者并存 → 告警遗留被忽略
+    try {
+      const legacy = join(root, 'data', 'runtime-settings.json')
+      if (existsSync(legacy) && legacy !== this.settingsPath) {
+        if (!existsSync(this.settingsPath)) {
+          mkdirSync(dirname(this.settingsPath), { recursive: true })
+          copyFileSync(legacy, this.settingsPath)
+          console.log(`[system-config] 遗留设置已迁移: ${legacy} -> ${this.settingsPath}`)
+        }
+        else {
+          console.warn(`[system-config] 检测到遗留设置文件 ${legacy}(现以 ${this.settingsPath} 为准,该文件被忽略)`)
+        }
+      }
+    }
+    catch (err) {
+      console.warn('[system-config] 遗留设置迁移失败(不阻断启动):', String(err?.message ?? err))
+    }
   }
 
   /** Nitro 启动时调用：加载覆盖 → 应用到 runtimeConfig → 挂文件监听 */
@@ -183,7 +207,7 @@ export class SystemConfigService {
     const validated: Record<string, unknown> = {}
     const changed: string[] = []
     for (const [key, value] of Object.entries(raw)) {
-      const desc = this.map.get(key)
+      const desc = this.map[key]
       if (!desc) continue // 未知键：忽略（schema 演进容错）
       const errs = validateValue(desc, value)
       if (errs.length) {
@@ -198,6 +222,8 @@ export class SystemConfigService {
     }
     this.overrides = validated
     this.recompute()
+    // 运行语义设置读取层(settings.ts effective 3s TTL)即时失效:live 键热重载零延迟
+    void import('./workshop/settings').then(m => m.invalidateRuntimeSettingsCache()).catch(() => {})
     return { changed }
   }
 
@@ -249,7 +275,7 @@ export class SystemConfigService {
     const next = { ...this.overrides }
     const changed: string[] = []
     for (const [key, rawValue] of Object.entries(patch)) {
-      const desc = this.map.get(key)
+      const desc = this.map[key]
       if (!desc) {
         errors[key] = ['未知设置项（不在 shared/config/schema.json 中）']
         continue

package/server/services/user.service.ts

@@ -83,7 +83,8 @@ export const userService = {
 
   // ===== 认证（公开端点）=====
 
-  /** 注册：创建账号 + 签发首个 token（邮箱/用户名占用 → 409） */
+  /** 注册：创建账号 + 签发首个 token（邮箱/用户名占用 → 409）。
+   * 首启初始化:系统尚无活跃管理员时,首个注册账号授予 admin(空库自注册建站) */
   register(input: UserRegister): AuthResult {
     if (userRepository.findByEmail(input.email)) {
       throw new AppError(409, ErrorCodes.CONFLICT, '邮箱已被注册')
@@ -91,8 +92,12 @@ export const userService = {
     if (userRepository.findByName(input.name)) {
       throw new AppError(409, 'USER_EXISTS', `用户名已存在: ${input.name}`)
     }
-    const user = userRepository.create({ ...input, role: 'user', status: 'active' })
-    const { raw } = userRepository.createToken(user.id, 'default')
+    const needsBootstrap = !userRepository.hasActiveAdmin()
+    if (needsBootstrap) {
+      console.log(`[users] 初始化:尚无管理员账号,首个注册账号授予管理员角色(${input.email})`)
+    }
+    const user = userRepository.create({ ...input, role: needsBootstrap ? 'admin' : 'user', status: 'active' })
+    const { raw } = userRepository.createToken(user.id, needsBootstrap ? 'bootstrap-admin' : 'default')
     return { user: this.publicProfile(user), token: raw }
   },
 

package/server/services/workshop/.mimosa/hook-state/sess_fed429fb-c8b7-4a50-bbd6-45afc580893f.json

@@ -0,0 +1 @@
+{"touched":[],"bashMutation":true,"reportedFindings":[],"findingEvents":[],"baseline":null,"stateErrors":[],"omittedReportedFindings":0,"omittedFindingEvents":0,"processing":null,"updatedAt":"2026-09-04T17:27:52.487Z"}

package/server/services/workshop/.mimosa/hook-status/sess_fed429fb-c8b7-4a50-bbd6-45afc580893f-e6b75bbfe6.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "mimosa-hook-status/v1",
+  "recordedAt": "2026-09-04T17:28:09.989Z",
+  "sessionId": "sess_fed429fb-c8b7-4a50-bbd6-45afc580893f",
+  "event": "PostToolUse",
+  "toolName": "Write",
+  "file": "D:\\codes\\ABO\\AgentWorkShop\\.omc\\plans\\codemod-fix-helper.cjs",
+  "outcome": "clear",
+  "coverage": "complete",
+  "findingCount": 0,
+  "durationMs": 4,
+  "hostState": "hook_complete",
+  "reportHint": ".mimosa/reports/"
+}

package/server/services/workshop/agents/adapters/line-spawn.ts

@@ -0,0 +1,111 @@
+/**
+ * 受控子进程拉起工具(harness 适配器共用)。
+ *
+ * 安全约束:
+ *  - 永不走 shell —— 除一种 Windows 特例:.cmd/.bat shim(如 npm 全局安装的
+ *    codex.cmd)不能被 CreateProcess 直接执行,须经固定的 'cmd.exe' /d /s /c
+ *    包装;此时逐参数做严格校验(拒绝引号与控制字符)并全量引号包裹,参数面
+ *    仍是结构化且无元字符的,不存在可注入的自由文本。
+ *  - 包装器是字面量 'cmd.exe',不由环境变量或请求决定;
+ *  - 命令先经 assertPlainExecutable(拒绝 shell 元字符)与 PATH 解析
+ *    (必须解析为磁盘上真实存在的文件)才可拉起。
+ */
+import { spawn as launchChildProcess, type ChildProcess } from 'node:child_process'
+import { existsSync, statSync } from 'node:fs'
+import { join } from 'node:path'
+
+const SHELL_META = /[\r\n;&|`<>$]/
+
+/** 拒绝 shell 元字符(命令只能是纯可执行路径) */
+export function assertPlainExecutable(command: string): string {
+  if (!command || SHELL_META.test(command)) {
+    throw new Error(`非法 harness 命令(含 shell 元字符或为空): ${JSON.stringify(command.slice(0, 80))}`)
+  }
+  return command
+}
+
+/** PATH + PATHEXT 解析裸命令名 → 绝对路径(win32;非 Windows 返回 null)。带扩展名优先,裸名(sh 脚本)最后 */
+function resolveOnPath(command: string): string | null {
+  if (process.platform !== 'win32') return null
+  const isFile = (p: string): boolean => {
+    try {
+      return existsSync(p) && statSync(p).isFile()
+    }
+    catch {
+      return false
+    }
+  }
+  const hasDir = command.includes('/') || command.includes('\\') || /^[A-Za-z]:/.test(command)
+  const exts = (process.env.PATHEXT?.split(';').filter(Boolean) ?? ['.EXE', '.CMD', '.BAT', '.COM']).map(e => e.toLowerCase())
+  const bases = hasDir
+    ? [command]
+    : (process.env.PATH ?? '').split(';').filter(Boolean).map(dir => join(dir, command))
+  // PATHEXT 顺序(.exe → .cmd → …)优先;裸名兜底(npm sh 脚本,win 上不可执行,仅最后回退)
+  for (const base of bases) {
+    for (const ext of exts) {
+      const full = base + ext
+      if (isFile(full)) return full
+    }
+  }
+  for (const base of bases) {
+    if (isFile(base)) return base
+  }
+  return null
+}
+
+/**
+ * 命令解析:裸名经 PATH 解析,返回磁盘上的绝对路径;.cmd/.bat 标记 needsCmd。
+ */
+function resolveExecutable(command: string): { file: string, needsCmd: boolean } {
+  assertPlainExecutable(command)
+  const file = resolveOnPath(command) ?? command
+  if (process.platform === 'win32') {
+    const lower = file.toLowerCase()
+    if (lower.endsWith('.cmd') || lower.endsWith('.bat')) return { file, needsCmd: true }
+  }
+  return { file, needsCmd: false }
+}
+
+export interface LineSpawnOptions {
+  cwd?: string
+  env?: Record<string, string>
+}
+
+/** .cmd 包装时的逐参数校验(引号/控制字符会改变 cmd 解析,拒绝) */
+function assertCmdSafeArg(arg: string): string {
+  if (/["\r\n\0]/.test(arg)) {
+    throw new Error(`参数含引号/控制字符,拒绝经 cmd 包装执行: ${JSON.stringify(arg.slice(0, 80))}`)
+  }
+  return arg
+}
+
+/** 拉起逐行 stdio 子进程(命令已经 resolveExecutable 校验) */
+export function spawnLineProcess(command: string, args: string[], options: LineSpawnOptions = {}): ChildProcess {
+  const { file, needsCmd } = resolveExecutable(command)
+  const env = { ...process.env, ...options.env }
+  if (needsCmd) {
+    // Windows .cmd shim:固定包装器 'cmd.exe' + /d /s /c。
+    // 可执行文件路径无条件引号包裹:无空格路径裸奔时,/s 模式的 cmd 会吞掉
+    // 路径中的反斜杠(C:\Users\... → C:Users...),引擎进程立即退出(code=1)。
+    // 参数仍逐个经 assertCmdSafeArg 校验(拒绝引号与控制字符),引号包裹不引入注入面。
+    const line = [`"${file}"`, ...args.map(a => assertCmdSafeArg(a)).map((token) => {
+      token = token.replace(/[\];&`<>$]/g, '^$1')
+      return token.includes(' ') ? `"${token}"` : token
+    })].join(' ')
+    return launchChildProcess('cmd.exe', ['/d', '/s', '/c', line], {
+      stdio: ['pipe', 'pipe', 'pipe'],
+      cwd: options.cwd ?? process.cwd(),
+      env,
+      windowsHide: true,
+      shell: false,
+      windowsVerbatimArguments: true,
+    })
+  }
+  return launchChildProcess(file, args, {
+    stdio: ['pipe', 'pipe', 'pipe'],
+    cwd: options.cwd ?? process.cwd(),
+    env,
+    windowsHide: true,
+    shell: false,
+  })
+}